last executing test programs: 19.641167067s ago: executing program 1 (id=4227): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x5, 0x8c}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) read$FUSE(r0, &(0x7f0000002540)={0x2020}, 0x202c) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) geteuid() r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000100)='\nY', 0x2}], 0x1) 17.829063593s ago: executing program 1 (id=4235): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x690a, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000200), &(0x7f0000000140)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040), &(0x7f0000000180)) sendto$inet6(r0, &(0x7f0000000300)="ac", 0x1, 0x0, &(0x7f0000000380)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) listen(r0, 0xfff) accept(r0, 0x0, 0x0) 17.635157378s ago: executing program 4 (id=4136): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r4, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5}]}, 0x1c}}, 0x0) 16.807307128s ago: executing program 1 (id=4241): sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$video(0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4}, 0xe) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x800}, 0xe) sendmmsg(r3, &(0x7f0000004940)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="eb", 0x1}], 0x1}}], 0x1, 0x0) 13.851101307s ago: executing program 0 (id=4250): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000003c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) 13.594221546s ago: executing program 4 (id=4252): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000)=0x2, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000600)=0x1b, 0x4) recvmmsg(r0, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) 12.588388701s ago: executing program 4 (id=4255): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000000480), 0x4000000000000ee, 0x200400c4) dup2(r1, r0) 11.240999295s ago: executing program 1 (id=4257): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x5, 0x8c}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) read$FUSE(r0, &(0x7f0000002540)={0x2020}, 0x202c) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) geteuid() r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000100)='\nY', 0x2}], 0x1) 11.207329965s ago: executing program 4 (id=4258): shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = open(0x0, 0x0, 0x0) memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06\xfd\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee]\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLY\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) ioctl$IOCTL_VMCI_VERSION(r1, 0x79f, &(0x7f0000000240)) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000180)={0x0, 0x21, 0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, '\x00', @p_u8=0x0}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x84, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @dev}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}]}, 0x84}}, 0x0) 11.169524044s ago: executing program 3 (id=4259): syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000000080), 0x0) r0 = io_uring_setup(0x18cc, &(0x7f0000000200)) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1}}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0x2000011a) recvmmsg(r1, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/175, 0xaf}], 0x1}}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f00000003c0)=""/4, 0x4}], 0x1}}], 0x2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10.136269327s ago: executing program 3 (id=4261): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000b80)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000100)='%-5lx \x00'}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 10.120594796s ago: executing program 4 (id=4262): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r4, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5}]}, 0x1c}}, 0x0) 10.11794698s ago: executing program 2 (id=4263): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c020000", @ANYBLOB="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", @ANYRES32=r2], 0x22c}}, 0x0) 9.865808212s ago: executing program 2 (id=4264): r0 = socket(0x11, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x2}, @mcast2={0x5, 0x5}}}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCFLSH(r1, 0x40204706, 0x20000000) 9.720033792s ago: executing program 0 (id=4265): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000)=0x2, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000600)=0x1b, 0x4) recvmmsg(r0, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) 9.608366294s ago: executing program 2 (id=4266): ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000002240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000051c0)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)='l', 0x1}, {0x0}], 0x2}], 0x1, 0x0) 9.254414118s ago: executing program 2 (id=4267): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$video(0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4}, 0xe) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x800}, 0xe) sendmmsg(r3, &(0x7f0000004940)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="eb", 0x1}], 0x1}}], 0x1, 0x0) 8.740889137s ago: executing program 0 (id=4268): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000000480), 0x4000000000000ee, 0x200400c4) dup2(r1, r0) 8.608502856s ago: executing program 3 (id=4269): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) 8.430395088s ago: executing program 3 (id=4270): socket$packet(0x11, 0x0, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) r5 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 8.358919618s ago: executing program 0 (id=4271): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfffffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs, 0x6e) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000031c0)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="6993dc", 0x3}], 0x1}], 0x1, 0x0) 7.344330087s ago: executing program 3 (id=4272): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000440)=0x2, 0x4) sendmsg$802154_dgram(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x24, @long}, 0x14, &(0x7f0000000140)={0x0}}, 0x0) 7.232846042s ago: executing program 0 (id=4273): shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = open(0x0, 0x0, 0x0) memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06\xfd\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee]\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLY\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) ioctl$IOCTL_VMCI_VERSION(r1, 0x79f, &(0x7f0000000240)) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000180)={0x0, 0x21, 0x0, r0, 0x0, &(0x7f0000000080)={0x990a77, 0x0, '\x00', @p_u8=0x0}}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x84, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @dev}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}]}, 0x84}}, 0x0) 7.221473229s ago: executing program 1 (id=4274): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r0, r1) sendmmsg$inet(r2, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="316f825a3d29f96a2093a917017b4cd30000000000000035ed313e19d6dd", 0x1e}, {&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59", 0x4f}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)="d0", 0x1}], 0x1}}], 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[], 0x2b8}}, 0x0) 6.680800987s ago: executing program 1 (id=4275): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xa}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xcb2}]}]}]}}]}, 0xac}}, 0x0) 5.940239925s ago: executing program 0 (id=4276): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x0, @local}], 0x20) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000040)=[@in={0x2, 0x0, @local}], 0x10) sendmmsg$inet6(r0, &(0x7f0000005f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24048080) r2 = add_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8982, &(0x7f00000112c0)={0x7, 'vlan1\x00', {0x6}, 0x4}) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x11, r2, r4, 0x9) r5 = socket$can_j1939(0x1d, 0x2, 0x7) socket$igmp(0x2, 0x3, 0x2) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x3}}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) close_range(r0, 0xffffffffffffffff, 0x0) 5.069494465s ago: executing program 3 (id=4277): ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000002240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000051c0)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)='l', 0x1}, {0x0}], 0x2}], 0x1, 0x0) 3.043468334s ago: executing program 2 (id=4278): socket$packet(0x11, 0x0, 0x300) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 3.000436966s ago: executing program 4 (id=4279): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040), &(0x7f0000000180)) sendto$inet6(r0, &(0x7f0000000300)="ac", 0x1, 0x0, &(0x7f0000000380)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) listen(r0, 0xfff) accept(r0, 0x0, 0x0) 0s ago: executing program 2 (id=4280): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001b8000/0x2000)=nil, &(0x7f000075c000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000000)={@local, @random="de9ea3f675c1", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x54, 0x6, 0x0, @remote, @mcast2, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "eb3ffa01d3e709af3cf2e0ac744f24ca"}, @md5sig={0x1d, 0x12, "58d74f5d02d8d561f97b2bdb1bc7617f"}, @fastopen={0x22, 0x9, "3ca78571dadd93"}, @timestamp={0x8, 0xa}, @exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/201, 0xc9}], 0x1, 0x0, 0x0) lseek(r2, 0x9, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000005c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000100)={r5}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f00000000c0)={r6, 0x0, 0x2908}) kernel console output (not intermixed with test programs): ] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 909.953653][T16983] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.986287][T16983] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.032692][T16983] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.043822][T16983] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.560761][ T2417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 910.568709][ T2417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 910.707500][ T2417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 910.730103][ T2417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 916.036210][T17447] misc userio: No port type given on /dev/userio [ 917.305857][T13467] block nbd1: Receive control failed (result -32) [ 917.317937][T17462] block nbd1: shutting down sockets [ 922.580856][T17586] syz.1.3468: attempt to access beyond end of device [ 922.580856][T17586] loop1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 922.640841][T17586] syz.1.3468: attempt to access beyond end of device [ 922.640841][T17586] loop1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 922.724551][T17586] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 922.735088][T17586] syz.1.3468: attempt to access beyond end of device [ 922.735088][T17586] loop1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 922.760520][T17586] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 922.779750][T17586] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 922.799695][T17586] UDF-fs: Scanning with blocksize 512 failed [ 922.812798][T17586] syz.1.3468: attempt to access beyond end of device [ 922.812798][T17586] loop1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 922.923864][T17586] syz.1.3468: attempt to access beyond end of device [ 922.923864][T17586] loop1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 922.988777][T17586] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 923.039104][T17586] syz.1.3468: attempt to access beyond end of device [ 923.039104][T17586] loop1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 923.089713][T17586] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 923.113947][T17586] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 923.133765][T17586] UDF-fs: Scanning with blocksize 1024 failed [ 923.161382][T17586] syz.1.3468: attempt to access beyond end of device [ 923.161382][T17586] loop1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 923.209830][T17586] syz.1.3468: attempt to access beyond end of device [ 923.209830][T17586] loop1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 923.229799][T17586] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 923.249944][T17586] syz.1.3468: attempt to access beyond end of device [ 923.249944][T17586] loop1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 923.263573][T17586] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 923.276966][T17586] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 923.322794][T17586] UDF-fs: Scanning with blocksize 2048 failed [ 923.353949][T17586] syz.1.3468: attempt to access beyond end of device [ 923.353949][T17586] loop1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 923.380899][T17586] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 923.392692][T17586] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 923.405096][T17586] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 923.422453][T17586] UDF-fs: Scanning with blocksize 4096 failed [ 923.432714][T17586] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 923.818288][T13467] Bluetooth: hci3: command 0x0406 tx timeout [ 927.618635][T17666] bio_check_eod: 2 callbacks suppressed [ 927.618655][T17666] syz.3.3486: attempt to access beyond end of device [ 927.618655][T17666] loop3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 927.710084][T17666] syz.3.3486: attempt to access beyond end of device [ 927.710084][T17666] loop3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 927.779809][T17666] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 927.999564][T17666] syz.3.3486: attempt to access beyond end of device [ 927.999564][T17666] loop3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 928.022457][T17666] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 928.083892][T17666] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 928.129832][T17666] UDF-fs: Scanning with blocksize 512 failed [ 928.410306][T17666] syz.3.3486: attempt to access beyond end of device [ 928.410306][T17666] loop3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 928.884465][T17666] syz.3.3486: attempt to access beyond end of device [ 928.884465][T17666] loop3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 928.954610][T17666] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 928.996611][T17666] syz.3.3486: attempt to access beyond end of device [ 928.996611][T17666] loop3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 929.094556][T17666] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 929.167891][T17666] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 929.175794][T17666] UDF-fs: Scanning with blocksize 1024 failed [ 929.183212][T17666] syz.3.3486: attempt to access beyond end of device [ 929.183212][T17666] loop3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 929.196673][T17666] syz.3.3486: attempt to access beyond end of device [ 929.196673][T17666] loop3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 929.210378][T17666] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 929.327363][T17666] syz.3.3486: attempt to access beyond end of device [ 929.327363][T17666] loop3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 929.846586][T17666] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 930.080789][T17666] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 930.143340][T17666] UDF-fs: Scanning with blocksize 2048 failed [ 930.422030][T17666] syz.3.3486: attempt to access beyond end of device [ 930.422030][T17666] loop3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 931.006366][T17666] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 931.230768][T17666] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 931.250045][T17666] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 931.290063][T17666] UDF-fs: Scanning with blocksize 4096 failed [ 931.301615][T17666] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 931.905498][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.915442][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.586227][T17733] netlink: 'syz.2.3506': attribute type 7 has an invalid length. [ 935.738154][T17760] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3514'. [ 935.873463][T17760] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3514'. [ 935.933751][T17760] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3514'. [ 938.257393][T17787] bio_check_eod: 2 callbacks suppressed [ 938.257414][T17787] syz.3.3515: attempt to access beyond end of device [ 938.257414][T17787] loop3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 938.276400][T17787] syz.3.3515: attempt to access beyond end of device [ 938.276400][T17787] loop3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 938.289411][T17787] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 938.301745][T17787] syz.3.3515: attempt to access beyond end of device [ 938.301745][T17787] loop3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 938.315423][T17787] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 938.325090][T17787] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 938.334600][T17787] UDF-fs: Scanning with blocksize 512 failed [ 938.341538][T17787] syz.3.3515: attempt to access beyond end of device [ 938.341538][T17787] loop3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 938.359515][T17787] syz.3.3515: attempt to access beyond end of device [ 938.359515][T17787] loop3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 938.373206][T17787] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 938.383183][T17787] syz.3.3515: attempt to access beyond end of device [ 938.383183][T17787] loop3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 938.396301][T17787] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 938.405894][T17787] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 938.413640][T17787] UDF-fs: Scanning with blocksize 1024 failed [ 938.420441][T17787] syz.3.3515: attempt to access beyond end of device [ 938.420441][T17787] loop3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 938.435348][T17787] syz.3.3515: attempt to access beyond end of device [ 938.435348][T17787] loop3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 938.448445][T17787] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 938.458298][T17787] syz.3.3515: attempt to access beyond end of device [ 938.458298][T17787] loop3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 938.471961][T17787] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 938.481682][T17787] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 938.489374][T17787] UDF-fs: Scanning with blocksize 2048 failed [ 938.497680][T17787] syz.3.3515: attempt to access beyond end of device [ 938.497680][T17787] loop3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 938.510873][T17787] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 938.520680][T17787] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 938.532556][T17787] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 938.540312][T17787] UDF-fs: Scanning with blocksize 4096 failed [ 938.546434][T17787] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 941.013343][T17819] netlink: 'syz.4.3532': attribute type 10 has an invalid length. [ 941.030843][ T25] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 941.241334][T17819] veth1_macvtap: left promiscuous mode [ 941.441115][T17826] netlink: 'syz.3.3533': attribute type 7 has an invalid length. [ 941.640318][ T9] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 942.047703][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 942.078283][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 942.139721][ T9] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 942.206168][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.324238][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 942.331307][ T25] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 942.341164][ T25] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 942.360696][ T25] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 942.405419][ T25] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 942.431892][ T9] usb 5-1: config 0 descriptor?? [ 942.455781][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 942.502694][ T25] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 942.588819][ T25] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 942.659040][ T25] usb 3-1: Product: syz [ 942.697665][ T25] usb 3-1: Manufacturer: syz [ 942.756135][ T25] usb 3-1: SerialNumber: syz [ 942.854334][ T25] usb 3-1: config 0 descriptor?? [ 943.156653][ T25] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 943.223599][ T25] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 943.321243][T17820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 943.372055][T17820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 943.456142][ T9] hid (null): invalid report_count 65331 [ 943.542393][ T9] hid-generic 0003:0158:0100.0017: unknown main item tag 0x1 [ 943.591204][ T8] usb 3-1: USB disconnect, device number 49 [ 943.706046][ T9] hid-generic 0003:0158:0100.0017: unexpected long global item [ 943.781500][ T8] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 943.900340][ T9] hid-generic 0003:0158:0100.0017: probe with driver hid-generic failed with error -22 [ 944.204451][ T9] usb 5-1: USB disconnect, device number 43 [ 944.881713][T17853] bio_check_eod: 2 callbacks suppressed [ 944.881755][T17853] syz.3.3540: attempt to access beyond end of device [ 944.881755][T17853] loop3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 944.901808][T17853] syz.3.3540: attempt to access beyond end of device [ 944.901808][T17853] loop3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 944.914869][T17853] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 944.925532][T17853] syz.3.3540: attempt to access beyond end of device [ 944.925532][T17853] loop3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 944.944035][T17853] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 944.953807][T17853] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 944.961617][T17853] UDF-fs: Scanning with blocksize 512 failed [ 944.971100][T17853] syz.3.3540: attempt to access beyond end of device [ 944.971100][T17853] loop3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 944.985371][T17853] syz.3.3540: attempt to access beyond end of device [ 944.985371][T17853] loop3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 944.998849][T17853] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 945.009331][T17853] syz.3.3540: attempt to access beyond end of device [ 945.009331][T17853] loop3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 945.022590][T17853] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 945.032402][T17853] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 945.040218][T17853] UDF-fs: Scanning with blocksize 1024 failed [ 945.048770][T17853] syz.3.3540: attempt to access beyond end of device [ 945.048770][T17853] loop3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 945.062517][T17853] syz.3.3540: attempt to access beyond end of device [ 945.062517][T17853] loop3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 945.075948][T17853] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 945.086667][T17853] syz.3.3540: attempt to access beyond end of device [ 945.086667][T17853] loop3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 945.100245][T17853] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 945.109980][T17853] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 945.117750][T17853] UDF-fs: Scanning with blocksize 2048 failed [ 945.125980][T17853] syz.3.3540: attempt to access beyond end of device [ 945.125980][T17853] loop3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 945.139904][T17853] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 945.150399][T17853] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 945.172270][T17853] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 945.180230][T17853] UDF-fs: Scanning with blocksize 4096 failed [ 945.186979][T17853] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 945.201535][T15406] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.831035][T15406] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.942685][T17864] netlink: 'syz.2.3545': attribute type 7 has an invalid length. [ 946.660286][T13467] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 946.677853][T13467] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 946.687900][T13467] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 946.706832][T13467] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 946.715804][T13467] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 946.730347][T13467] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 946.748795][T15406] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.770135][T17876] netlink: 'syz.1.3549': attribute type 10 has an invalid length. [ 946.888510][T17876] veth1_macvtap: left promiscuous mode [ 946.998573][T15406] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.094334][T17884] netlink: 'syz.0.3547': attribute type 11 has an invalid length. [ 947.660779][ T45] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 948.177541][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 948.313518][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 948.525501][ T45] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 948.645387][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.655906][ T45] usb 2-1: config 0 descriptor?? [ 948.805975][ T53] Bluetooth: hci0: command tx timeout [ 949.025173][T15406] bridge_slave_1: left allmulticast mode [ 949.041370][T15406] bridge_slave_1: left promiscuous mode [ 949.047298][T15406] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.349453][T15406] bridge_slave_0: left allmulticast mode [ 949.361217][T15406] bridge_slave_0: left promiscuous mode [ 949.367052][T15406] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.465778][T17908] netlink: 'syz.0.3557': attribute type 7 has an invalid length. [ 949.570926][T17876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 949.674480][T17876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 950.094313][ T45] hid (null): invalid report_count 65331 [ 950.148019][ T45] hid-generic 0003:0158:0100.0018: unknown main item tag 0x1 [ 950.179874][ T45] hid-generic 0003:0158:0100.0018: unexpected long global item [ 950.188684][ T45] hid-generic 0003:0158:0100.0018: probe with driver hid-generic failed with error -22 [ 950.234853][ T45] usb 2-1: USB disconnect, device number 35 [ 950.851838][ T53] Bluetooth: hci0: command tx timeout [ 952.302510][T15406] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 952.323915][T15406] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 952.340806][T15406] bond0 (unregistering): Released all slaves [ 952.405342][T17944] netlink: 'syz.3.3568': attribute type 7 has an invalid length. [ 952.980219][ T53] Bluetooth: hci0: command tx timeout [ 953.424599][T17872] chnl_net:caif_netlink_parms(): no params data found [ 953.758897][T15406] hsr_slave_0: left promiscuous mode [ 953.777401][T15406] hsr_slave_1: left promiscuous mode [ 953.800783][T15406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 953.818479][T15406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 953.856951][T15406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 953.901912][T15406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 954.075562][T15406] veth0_macvtap: left promiscuous mode [ 954.110866][T15406] veth1_vlan: left promiscuous mode [ 954.190030][T15406] veth0_vlan: left promiscuous mode [ 954.980527][T13467] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 954.991261][T13467] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 955.000172][T13467] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 955.008196][T13467] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 955.019683][T13467] Bluetooth: hci0: command tx timeout [ 955.025304][T13467] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 955.039976][T13467] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 955.519840][ T25] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 955.709804][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 955.727203][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 955.748419][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 955.759078][ T25] usb 3-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 955.768714][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.788813][ T25] usb 3-1: config 0 descriptor?? [ 955.871354][T15406] team0 (unregistering): Port device team_slave_1 removed [ 955.919069][T15406] team0 (unregistering): Port device team_slave_0 removed [ 956.983579][T17872] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.006071][T17872] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.026748][T17872] bridge_slave_0: entered allmulticast mode [ 957.057813][T17872] bridge_slave_0: entered promiscuous mode [ 957.089888][ T53] Bluetooth: hci1: command tx timeout [ 957.116041][T17872] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.376832][T17872] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.424667][T17872] bridge_slave_1: entered allmulticast mode [ 957.435386][T17872] bridge_slave_1: entered promiscuous mode [ 957.624062][T17872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 957.647695][T17872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 957.940756][T17872] team0: Port device team_slave_0 added [ 958.015215][T17872] team0: Port device team_slave_1 added [ 958.161084][T17872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 958.168154][T17872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.194261][ C1] vkms_vblank_simulate: vblank timer overrun [ 958.216051][T17872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 958.234955][T17872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 958.290187][T17872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.397681][T17872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 958.413609][ T25] usbhid 3-1:0.0: can't add hid device: -71 [ 958.422402][ T25] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 958.445450][ T25] usb 3-1: USB disconnect, device number 50 [ 958.833780][T15406] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.470079][ T53] Bluetooth: hci1: command tx timeout [ 959.739541][T15406] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.974103][T17872] hsr_slave_0: entered promiscuous mode [ 960.118522][T17872] hsr_slave_1: entered promiscuous mode [ 960.177344][T17872] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 960.215168][T17872] Cannot create hsr debugfs directory [ 960.235422][ T29] audit: type=1326 audit(1720180333.451:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18078 comm="syz.0.3600" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc737575bd9 code=0x0 [ 960.305886][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 960.316487][T15406] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.318559][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 960.336170][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 960.352261][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 960.365102][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 960.373032][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 960.446173][T17988] chnl_net:caif_netlink_parms(): no params data found [ 960.472791][T15406] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.700338][T17988] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.707710][T17988] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.717487][T17988] bridge_slave_0: entered allmulticast mode [ 960.725111][T17988] bridge_slave_0: entered promiscuous mode [ 960.764313][T17988] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.777201][T17988] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.784607][T17988] bridge_slave_1: entered allmulticast mode [ 960.801436][T17988] bridge_slave_1: entered promiscuous mode [ 961.581184][ T53] Bluetooth: hci1: command tx timeout [ 962.491244][ T53] Bluetooth: hci4: command tx timeout [ 962.996940][T15406] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 963.090225][T15406] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 963.126110][T15406] bond0 (unregistering): Released all slaves [ 963.221188][T17988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 963.273372][T17988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 963.380047][ T5131] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 963.424311][T17988] team0: Port device team_slave_0 added [ 963.525852][T17988] team0: Port device team_slave_1 added [ 963.590813][ T5131] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 963.610817][ T5131] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.620989][ T5131] usb 3-1: Product: syz [ 963.625192][ T5131] usb 3-1: Manufacturer: syz [ 963.631849][ T5131] usb 3-1: SerialNumber: syz [ 963.653910][ T5131] hub 3-1:1.0: bad descriptor, ignoring hub [ 963.660239][ T53] Bluetooth: hci1: command tx timeout [ 963.678153][ T5131] hub 3-1:1.0: probe with driver hub failed with error -5 [ 963.692820][ T5131] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 963.764753][T17988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 963.788621][T17988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 963.792206][ T25] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 963.838900][T17988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 963.963874][T17988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 963.977485][T17988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 964.009821][T17988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 964.422905][T15406] hsr_slave_0: left promiscuous mode [ 964.433348][T15406] hsr_slave_1: left promiscuous mode [ 964.485153][T15406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 964.506760][T15406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 964.521167][T15406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 964.528695][T15406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 964.549028][ T53] Bluetooth: hci4: command tx timeout [ 964.588467][T15406] veth0_macvtap: left promiscuous mode [ 964.608233][T15406] veth1_vlan: left promiscuous mode [ 964.613166][ T5131] usb 3-1: USB disconnect, device number 51 [ 964.613859][T15406] @ÿ: left promiscuous mode [ 964.725499][T15406] pim6reg (unregistering): left allmulticast mode [ 964.851825][ T25] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 964.868550][ T25] ath9k_htc: Failed to initialize the device [ 964.891275][ T5131] usb 3-1: ath9k_htc: USB layer deinitialized [ 964.973949][T18131] fuse: Unknown parameter 'fd0x0000000000000003' [ 965.032476][ T29] audit: type=1326 audit(1720180338.251:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18132 comm="syz.2.3610" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0bd2975bd9 code=0x0 [ 965.959491][T15406] team0 (unregistering): Port device team_slave_1 removed [ 966.110557][T15406] team0 (unregistering): Port device team_slave_0 removed [ 966.627876][ T53] Bluetooth: hci4: command tx timeout [ 967.135876][T18082] chnl_net:caif_netlink_parms(): no params data found [ 967.254263][T18082] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.266214][T18082] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.276809][T18082] bridge_slave_0: entered allmulticast mode [ 967.291073][T18082] bridge_slave_0: entered promiscuous mode [ 967.341040][T17988] hsr_slave_0: entered promiscuous mode [ 967.368596][T17988] hsr_slave_1: entered promiscuous mode [ 967.389499][T18082] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.399262][T18082] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.408788][T18082] bridge_slave_1: entered allmulticast mode [ 967.416587][T18082] bridge_slave_1: entered promiscuous mode [ 967.562518][T18082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 967.599536][T18082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 967.661077][T17872] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 967.693364][T17872] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 967.707256][T17872] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 967.741253][T18082] team0: Port device team_slave_0 added [ 967.750488][T18082] team0: Port device team_slave_1 added [ 967.769217][T17872] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 967.823140][T18082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 967.830335][T18082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 967.858089][T18082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 967.871471][T18082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 967.878440][T18082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 967.906837][T18082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 968.012371][T17872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 968.067382][ T53] Bluetooth: hci3: unexpected event 0x3e length: 360 > 260 [ 968.067420][ T53] Bluetooth: hci3: unexpected subevent 0x0d length: 359 > 260 [ 968.083329][ T53] Bluetooth: hci3: Unknown advertising packet type: 0x1f [ 968.083401][ T53] Bluetooth: hci3: adv larger than maximum supported [ 968.138588][T17872] 8021q: adding VLAN 0 to HW filter on device team0 [ 968.195943][T18082] hsr_slave_0: entered promiscuous mode [ 968.202442][T18082] hsr_slave_1: entered promiscuous mode [ 968.208565][T18082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 968.217975][T18082] Cannot create hsr debugfs directory [ 968.332982][ T29] audit: type=1326 audit(1720180341.551:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18165 comm="syz.0.3619" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc737575bd9 code=0x0 [ 968.357833][T15406] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.386911][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.394102][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 968.517492][T15406] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.542313][ T5131] bridge0: port 2(bridge_slave_1) entered blocking state [ 968.549502][ T5131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 968.635154][T15406] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.739959][ T53] Bluetooth: hci4: command tx timeout [ 968.815001][T17988] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 968.836519][T17988] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 968.893369][T15406] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.909908][T17988] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 969.190436][T17988] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 969.765657][T15406] bridge_slave_1: left allmulticast mode [ 969.784946][T15406] bridge_slave_1: left promiscuous mode [ 969.803292][T15406] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.832073][T15406] bridge_slave_0: left allmulticast mode [ 969.837750][T15406] bridge_slave_0: left promiscuous mode [ 969.869853][T15406] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.788971][T15406] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 970.809416][T15406] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 970.837696][T15406] bond0 (unregistering): Released all slaves [ 970.886456][T18197] slcan: can't register candev [ 970.920301][T18197] Falling back ldisc for ptm0. [ 971.148836][ T53] Bluetooth: hci2: unexpected event 0x3e length: 360 > 260 [ 971.148882][ T53] Bluetooth: hci2: unexpected subevent 0x0d length: 359 > 260 [ 971.183771][ T53] Bluetooth: hci2: Unknown advertising packet type: 0x1f [ 971.183874][ T53] Bluetooth: hci2: adv larger than maximum supported [ 971.203573][ T29] audit: type=1326 audit(1720180344.401:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18225 comm="syz.2.3628" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0bd2975bd9 code=0x0 [ 971.233307][T17872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 971.658508][T15406] hsr_slave_0: left promiscuous mode [ 971.695802][T15406] hsr_slave_1: left promiscuous mode [ 971.720033][T15406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 971.727491][T15406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 971.764421][T15406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 971.780024][T15406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 971.963467][T15406] veth1_macvtap: left promiscuous mode [ 971.986988][T15406] veth0_macvtap: left promiscuous mode [ 972.001854][T15406] veth1_vlan: left promiscuous mode [ 972.008173][T15406] veth0_vlan: left promiscuous mode [ 972.882019][T15406] pim6reg (unregistering): left allmulticast mode [ 973.812875][T15406] team0 (unregistering): Port device team_slave_1 removed [ 973.968418][T15406] team0 (unregistering): Port device team_slave_0 removed [ 973.974714][ T29] audit: type=1326 audit(1720180347.191:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18297 comm="syz.0.3637" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc737575bd9 code=0x0 [ 974.721105][T17988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 974.756617][T17872] veth0_vlan: entered promiscuous mode [ 974.897739][T18082] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 974.919219][T18082] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 974.937357][T17872] veth1_vlan: entered promiscuous mode [ 974.959951][T18082] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 975.003367][T18082] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 975.095017][T17988] 8021q: adding VLAN 0 to HW filter on device team0 [ 975.166116][T17988] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 975.178227][T17988] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 975.228292][ T5131] bridge0: port 1(bridge_slave_0) entered blocking state [ 975.235547][ T5131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 975.284302][ T5131] bridge0: port 2(bridge_slave_1) entered blocking state [ 975.291546][ T5131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 975.996346][T18082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 976.041264][T17872] veth0_macvtap: entered promiscuous mode [ 976.115756][T18082] 8021q: adding VLAN 0 to HW filter on device team0 [ 976.148597][T17872] veth1_macvtap: entered promiscuous mode [ 976.184873][T17872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 976.207508][T17872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.254447][T17872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 976.286668][T17872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.317678][T17872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 976.361398][T16417] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.368613][T16417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 976.463887][T17872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 976.490784][T17872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.505440][T17872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 976.517292][T17872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.535905][T17872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 976.548118][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.555321][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 976.576330][T17872] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.587405][T17872] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.596958][T17872] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.611675][T17872] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.674947][T17988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 976.749298][T18082] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 976.925509][T17988] veth0_vlan: entered promiscuous mode [ 976.937574][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 976.954333][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 977.056586][T17988] veth1_vlan: entered promiscuous mode [ 977.145291][ T2817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 977.160160][ T2817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 977.196903][T17988] veth0_macvtap: entered promiscuous mode [ 977.215515][ T29] audit: type=1326 audit(1720180350.421:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18335 comm="syz.0.3646" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc737575bd9 code=0x0 [ 977.238528][T17988] veth1_macvtap: entered promiscuous mode [ 977.268834][T17988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 977.291219][T17988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.301365][T17988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 977.311913][T17988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.321923][T17988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 977.333969][T17988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.371558][T17988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 977.435645][T17988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 977.449999][T17988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.467008][T17988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 977.477948][T17988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.493576][T17988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 977.506215][T17988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.529283][T17988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 977.566316][T17988] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.596307][T17988] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.598197][T18346] nvme_fabrics: unknown parameter or missing value 'Y' in ctrl creation request [ 977.607526][T17988] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.623262][T17988] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.658846][T18082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 977.817883][T17063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 977.843119][T17063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 977.972208][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 978.004154][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 978.110646][T18082] veth0_vlan: entered promiscuous mode [ 978.320170][T18082] veth1_vlan: entered promiscuous mode [ 979.068480][T18082] veth0_macvtap: entered promiscuous mode [ 979.111765][T18082] veth1_macvtap: entered promiscuous mode [ 979.242925][T18082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 979.290748][T18082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 979.300734][T18082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 979.311963][T18082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 979.321925][T18082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 979.333384][T18082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 979.523110][T18082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 979.979879][T18082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.054911][T18082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 980.085188][T18082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 980.099296][T18082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.119880][T18082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 980.139838][T18082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.161126][T18082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 980.185033][T18082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.205233][T18082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 980.233705][T18082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.264229][T18082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 980.330802][T18082] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.339541][T18082] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.381760][T18082] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.409695][T18082] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.762096][T17063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 980.806351][T17063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 981.473882][ T2817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 981.570407][ T2817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 987.536595][T18459] nvme_fabrics: unknown parameter or missing value 'Y' in ctrl creation request [ 988.627431][ T29] audit: type=1326 audit(1720180361.841:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18470 comm="syz.2.3680" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0bd2975bd9 code=0x0 [ 988.971427][T18481] can0: slcan on ptm0. [ 989.820375][T18472] can0 (unregistered): slcan off ptm0. [ 992.597250][ T29] audit: type=1326 audit(1720180365.811:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18526 comm="syz.1.3694" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d5d975bd9 code=0x0 [ 993.524715][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.532400][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 996.246892][T18596] nvme_fabrics: unknown parameter or missing value 'Y' in ctrl creation request [ 998.027528][T18618] netlink: 'syz.0.3721': attribute type 10 has an invalid length. [ 998.071639][T18618] veth1_macvtap: left promiscuous mode [ 998.337468][ T29] audit: type=1326 audit(1720180371.551:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18628 comm="syz.4.3725" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb4d3375bd9 code=0x0 [ 998.424895][T18630] netlink: 'syz.1.3719': attribute type 1 has an invalid length. [ 998.432888][T18630] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3719'. [ 998.443245][T16417] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 998.640439][T16417] usb 1-1: Using ep0 maxpacket: 16 [ 998.649228][T16417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 998.684544][T16417] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 998.728364][T16417] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.773060][T16417] usb 1-1: config 0 descriptor?? [ 998.792717][T16173] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 998.960456][T18638] nvme_fabrics: unknown parameter or missing value 'Y' in ctrl creation request [ 999.019907][T16173] usb 4-1: Using ep0 maxpacket: 8 [ 999.049761][T16173] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 999.138273][T16173] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 999.212966][T16173] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 999.285041][T16173] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 999.355196][T16173] usb 4-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 999.409638][T16173] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.479074][T16173] usb 4-1: config 0 descriptor?? [ 999.508306][T16173] usbhid 4-1:0.0: can't add hid device: -22 [ 999.520740][T18618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 999.532702][T18618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 999.555098][T16173] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 999.569028][T16417] hid (null): invalid report_count 65331 [ 999.592764][T16417] hid-generic 0003:0158:0100.0019: unknown main item tag 0x1 [ 999.625563][T16417] hid-generic 0003:0158:0100.0019: unexpected long global item [ 999.655277][T16417] hid-generic 0003:0158:0100.0019: probe with driver hid-generic failed with error -22 [ 999.803708][T16417] usb 1-1: USB disconnect, device number 44 [ 999.897351][T16173] usb 4-1: USB disconnect, device number 34 [ 1001.019822][T15406] tipc: Subscription rejected, illegal request [ 1002.006171][T15406] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.466780][T15406] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.159881][ T29] audit: type=1326 audit(1720180376.341:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18685 comm="syz.2.3745" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0bd2975bd9 code=0x0 [ 1003.508035][T15406] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.550975][T13467] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1003.562732][T13467] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1003.571915][T13467] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1003.598799][T13467] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1003.607950][T13467] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1003.615510][T13467] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1003.750134][ T137] tipc: Subscription rejected, illegal request [ 1003.763632][T15406] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.017343][T15406] bridge_slave_1: left allmulticast mode [ 1005.027511][T15406] bridge_slave_1: left promiscuous mode [ 1005.034504][T15406] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.222456][T15406] bridge_slave_0: left allmulticast mode [ 1005.228150][T15406] bridge_slave_0: left promiscuous mode [ 1005.260114][T15406] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.729880][T13467] Bluetooth: hci2: command tx timeout [ 1006.426305][T17063] tipc: Subscription rejected, illegal request [ 1007.449328][T15406] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1007.476005][T15406] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1007.492840][T15406] bond0 (unregistering): Released all slaves [ 1007.772010][T18778] fuse: Unknown parameter '0x0000000000000006' [ 1007.814205][ T53] Bluetooth: hci2: command tx timeout [ 1008.364670][T18708] chnl_net:caif_netlink_parms(): no params data found [ 1009.145920][ T2417] tipc: Subscription rejected, illegal request [ 1009.264106][T15406] hsr_slave_0: left promiscuous mode [ 1009.296851][T15406] hsr_slave_1: left promiscuous mode [ 1009.308271][T15406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1009.319851][T15406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1009.338727][T15406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1009.349912][T15406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1009.417677][T15406] veth0_macvtap: left promiscuous mode [ 1009.444732][T15406] veth1_vlan: left promiscuous mode [ 1009.564319][T15406] veth0_vlan: left promiscuous mode [ 1009.891464][ T53] Bluetooth: hci2: command tx timeout [ 1011.988704][ T53] Bluetooth: hci2: command tx timeout [ 1012.076785][T15406] team0 (unregistering): Port device team_slave_1 removed [ 1012.171457][T15406] team0 (unregistering): Port device team_slave_0 removed [ 1012.370460][T17063] tipc: Subscription rejected, illegal request [ 1014.044827][T18708] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.071142][T18708] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.078573][T18708] bridge_slave_0: entered allmulticast mode [ 1014.091174][T18708] bridge_slave_0: entered promiscuous mode [ 1014.111282][T18708] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.118428][T18708] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.127853][T18708] bridge_slave_1: entered allmulticast mode [ 1014.135288][T18708] bridge_slave_1: entered promiscuous mode [ 1014.462022][T18708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1015.072792][T18708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1015.446879][T18708] team0: Port device team_slave_0 added [ 1015.513196][T18708] team0: Port device team_slave_1 added [ 1015.680430][ T2417] tipc: Subscription rejected, illegal request [ 1015.779296][T18708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1015.802522][T13467] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1015.814523][T13467] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1015.824856][T13467] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1015.833179][T18708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1015.833445][T13467] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1015.868011][T18708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1015.895694][T13467] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1015.905836][T18708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1015.913302][T13467] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1015.920568][T18708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1015.948085][T18708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1016.150857][T18708] hsr_slave_0: entered promiscuous mode [ 1016.180562][T18708] hsr_slave_1: entered promiscuous mode [ 1016.188190][T18708] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1016.201936][T18708] Cannot create hsr debugfs directory [ 1016.310803][T15406] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.229283][T15406] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.529946][T15406] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.698094][T15406] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.137492][ T53] Bluetooth: hci1: command tx timeout [ 1018.954642][T15406] bridge_slave_1: left allmulticast mode [ 1018.983980][T15406] bridge_slave_1: left promiscuous mode [ 1019.000576][T15406] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.040448][T15406] bridge_slave_0: left allmulticast mode [ 1019.060734][T15406] bridge_slave_0: left promiscuous mode [ 1019.066578][T15406] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.262570][ T53] Bluetooth: hci1: command tx timeout [ 1021.944185][T15406] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1022.057144][T15406] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1022.110264][T15406] bond0 (unregistering): Released all slaves [ 1022.291226][ T53] Bluetooth: hci1: command tx timeout [ 1022.660886][T18906] chnl_net:caif_netlink_parms(): no params data found [ 1022.674601][T18985] fuse: Unknown parameter 'fd0x0000000000000006' [ 1024.309095][T15406] hsr_slave_0: left promiscuous mode [ 1024.361264][T15406] hsr_slave_1: left promiscuous mode [ 1024.389762][ T53] Bluetooth: hci1: command tx timeout [ 1024.403913][T15406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1024.435916][T15406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1024.479757][T15406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1024.516635][T15406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1024.625700][T15406] veth1_macvtap: left promiscuous mode [ 1024.635831][T15406] veth0_macvtap: left promiscuous mode [ 1024.644852][T15406] veth1_vlan: left promiscuous mode [ 1024.656492][T15406] veth0_vlan: left promiscuous mode [ 1026.077832][T19019] fuse: Unknown parameter 'fd0x0000000000000006' [ 1026.997199][T15406] team0 (unregistering): Port device team_slave_1 removed [ 1027.201448][T15406] team0 (unregistering): Port device team_slave_0 removed [ 1031.050963][T18906] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.058112][T18906] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.089265][T18906] bridge_slave_0: entered allmulticast mode [ 1031.111172][T18906] bridge_slave_0: entered promiscuous mode [ 1031.138375][T18906] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.158852][T18906] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.180126][T18906] bridge_slave_1: entered allmulticast mode [ 1031.189415][T18906] bridge_slave_1: entered promiscuous mode [ 1031.742530][T18906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1032.142176][T18906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1032.265277][T18708] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1032.360874][T18906] team0: Port device team_slave_0 added [ 1032.388156][T18708] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1032.445047][T18708] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1032.483578][T18906] team0: Port device team_slave_1 added [ 1032.605686][T18708] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1032.663092][T18906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1032.694198][T18906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1032.834377][T18906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1032.937392][T18906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1032.970767][T18906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1033.109168][T18906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1033.775734][T18906] hsr_slave_0: entered promiscuous mode [ 1033.808683][T18906] hsr_slave_1: entered promiscuous mode [ 1034.850178][ T53] Bluetooth: hci3: unexpected event 0x3e length: 360 > 260 [ 1034.850214][ T53] Bluetooth: hci3: unexpected subevent 0x0d length: 359 > 260 [ 1034.865014][ T53] Bluetooth: hci3: Unknown advertising packet type: 0x1f [ 1034.865043][ T53] Bluetooth: hci3: adv larger than maximum supported [ 1035.142353][T18708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1035.993121][T18708] 8021q: adding VLAN 0 to HW filter on device team0 [ 1036.031827][T16417] bridge0: port 1(bridge_slave_0) entered blocking state [ 1036.039017][T16417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1036.439047][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 1036.446273][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1036.472234][T19163] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1036.663877][T18708] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1036.692744][T18708] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1036.886271][T18906] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1036.928982][T18906] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1037.003223][T18906] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1037.054926][T18906] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1037.243463][T18708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1037.450962][T18906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1037.505251][T18906] 8021q: adding VLAN 0 to HW filter on device team0 [ 1037.542281][T18708] veth0_vlan: entered promiscuous mode [ 1037.656999][T18708] veth1_vlan: entered promiscuous mode [ 1037.796355][T16173] bridge0: port 1(bridge_slave_0) entered blocking state [ 1037.803596][T16173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1037.821855][T16173] bridge0: port 2(bridge_slave_1) entered blocking state [ 1037.829024][T16173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1038.597551][T19194] netlink: 'syz.4.3877': attribute type 10 has an invalid length. [ 1038.614575][T19194] veth1_macvtap: left promiscuous mode [ 1038.696658][T18708] veth0_macvtap: entered promiscuous mode [ 1038.804262][T18708] veth1_macvtap: entered promiscuous mode [ 1038.906926][T18708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1038.943611][T18708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.966874][T18708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1038.999532][T18708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.015162][ T5087] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1039.024926][T18708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1039.059174][T18708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.107245][T18708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1039.126408][T18708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1039.170473][T18708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.209752][T18708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1039.210470][ T5087] usb 5-1: Using ep0 maxpacket: 16 [ 1039.252650][T18708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.256443][ T5087] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1039.283032][T18708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1039.323522][ T5087] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1039.344681][T18708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.349640][ T5087] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.384041][T18708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1039.397114][ T5087] usb 5-1: config 0 descriptor?? [ 1039.443516][T18708] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.482415][T18708] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.523721][T18708] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.551458][T18708] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.663794][T18906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1039.963119][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1039.982262][T19194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1039.999310][T18906] veth0_vlan: entered promiscuous mode [ 1040.010538][T19194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1040.018474][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1040.104268][ T5087] hid (null): invalid report_count 65331 [ 1040.131748][ T5087] hid-generic 0003:0158:0100.001A: unknown main item tag 0x1 [ 1040.139207][ T5087] hid-generic 0003:0158:0100.001A: unexpected long global item [ 1040.150017][T18906] veth1_vlan: entered promiscuous mode [ 1040.189212][ T5087] hid-generic 0003:0158:0100.001A: probe with driver hid-generic failed with error -22 [ 1040.259425][ T2817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1040.279076][ T2817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1040.306693][T18906] veth0_macvtap: entered promiscuous mode [ 1040.320641][ T785] usb 5-1: USB disconnect, device number 44 [ 1040.371742][T18906] veth1_macvtap: entered promiscuous mode [ 1040.437254][T18906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1040.469939][T18906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.481366][T18906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1040.497316][T18906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.507978][T18906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1040.525305][T18906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.555304][T18906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1040.577187][T18906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.611562][T18906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1040.667867][T18906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1040.680837][T18906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.696406][T18906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1040.709838][T18906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.721708][T18906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1040.737338][T18906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.756460][T18906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1040.756483][T18906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.759363][T18906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1040.764451][T18906] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.764486][T18906] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.764512][T18906] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.764540][T18906] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.067230][T15833] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1041.088345][T15833] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1041.275501][T15833] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1041.377963][T15833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1042.631247][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.725793][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.832010][T19278] netlink: 'syz.0.3890': attribute type 10 has an invalid length. [ 1043.870307][T19278] veth1_macvtap: left promiscuous mode [ 1043.924629][T19281] netlink: 'syz.3.3891': attribute type 10 has an invalid length. [ 1043.932891][T19281] bridge0: port 3(team0) entered blocking state [ 1043.939267][T19281] bridge0: port 3(team0) entered disabled state [ 1043.945875][T19281] team0: entered allmulticast mode [ 1043.951278][T19281] team_slave_0: entered allmulticast mode [ 1043.957014][T19281] team_slave_1: entered allmulticast mode [ 1043.964819][T19281] team0: entered promiscuous mode [ 1043.970935][T19281] team_slave_0: entered promiscuous mode [ 1043.976767][T19281] team_slave_1: entered promiscuous mode [ 1043.983322][T19281] bridge0: port 3(team0) entered blocking state [ 1043.989719][T19281] bridge0: port 3(team0) entered forwarding state [ 1044.126997][T13467] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1044.139966][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.141394][T13467] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1044.181069][T13467] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1044.190355][ T5087] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1044.204113][T13467] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1044.214517][T13467] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1044.225376][T13467] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1044.327678][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.446302][ T5087] usb 1-1: Using ep0 maxpacket: 16 [ 1044.488651][ T5087] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1044.555569][ T5087] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1044.598818][ T5087] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.666452][ T5087] usb 1-1: config 0 descriptor?? [ 1044.896803][ T12] bridge_slave_1: left allmulticast mode [ 1044.927388][ T12] bridge_slave_1: left promiscuous mode [ 1044.940087][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.022396][ T12] bridge_slave_0: left allmulticast mode [ 1045.050361][ T12] bridge_slave_0: left promiscuous mode [ 1045.056157][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.187878][T19278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1045.219331][T19278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1045.264814][ T5087] hid (null): invalid report_count 65331 [ 1045.310240][ T5087] hid-generic 0003:0158:0100.001B: unknown main item tag 0x1 [ 1045.319307][ T5087] hid-generic 0003:0158:0100.001B: unexpected long global item [ 1045.360364][ T5087] hid-generic 0003:0158:0100.001B: probe with driver hid-generic failed with error -22 [ 1045.471988][ T5087] usb 1-1: USB disconnect, device number 45 [ 1046.290247][ T53] Bluetooth: hci0: command tx timeout [ 1048.370564][ T53] Bluetooth: hci0: command tx timeout [ 1048.700392][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1048.747461][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1048.828560][ T12] bond0 (unregistering): Released all slaves [ 1048.931744][T19285] chnl_net:caif_netlink_parms(): no params data found [ 1049.605732][T19285] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.620739][T19285] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.628070][T19285] bridge_slave_0: entered allmulticast mode [ 1049.667217][T19285] bridge_slave_0: entered promiscuous mode [ 1049.794246][T19285] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.807482][T19285] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.819839][T19285] bridge_slave_1: entered allmulticast mode [ 1049.835540][T19285] bridge_slave_1: entered promiscuous mode [ 1050.058677][ T12] hsr_slave_0: left promiscuous mode [ 1050.169774][ T12] hsr_slave_1: left promiscuous mode [ 1050.226116][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1050.256987][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1050.422123][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1050.452068][ T53] Bluetooth: hci0: command tx timeout [ 1050.458737][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1050.509239][ T12] veth0_macvtap: left promiscuous mode [ 1050.515131][ T12] veth1_vlan: left promiscuous mode [ 1050.521285][ T12] veth0_vlan: left promiscuous mode [ 1050.601481][T13467] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1050.613026][T13467] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1050.622594][T13467] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1050.638018][T13467] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1050.647198][T13467] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1050.655131][T13467] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1051.272059][T19383] slcan: can't register candev [ 1051.278172][T19383] Falling back ldisc for ptm0. [ 1052.543102][T13467] Bluetooth: hci0: command tx timeout [ 1052.690021][T13467] Bluetooth: hci2: command tx timeout [ 1053.196786][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1053.288172][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1053.958083][T19285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1053.967512][T19374] netlink: 'syz.1.3906': attribute type 10 has an invalid length. [ 1053.975953][T19374] bridge0: port 3(team0) entered blocking state [ 1053.982457][T19374] bridge0: port 3(team0) entered disabled state [ 1053.988941][T19374] team0: entered allmulticast mode [ 1053.994142][T19374] team_slave_0: entered allmulticast mode [ 1053.999934][T19374] team_slave_1: entered allmulticast mode [ 1054.007550][T19374] team0: entered promiscuous mode [ 1054.012914][T19374] team_slave_0: entered promiscuous mode [ 1054.018922][T19374] team_slave_1: entered promiscuous mode [ 1054.025410][T19374] bridge0: port 3(team0) entered blocking state [ 1054.031837][T19374] bridge0: port 3(team0) entered forwarding state [ 1054.177617][T19406] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3913'. [ 1054.253621][T19285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1054.537728][T19285] team0: Port device team_slave_0 added [ 1054.561020][T19285] team0: Port device team_slave_1 added [ 1054.676521][T19285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1054.688756][T19285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1054.759699][T19285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1054.773803][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.773900][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.775411][T13467] Bluetooth: hci2: command tx timeout [ 1054.934394][T19285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1054.943904][T19285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.012880][T19285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1055.384018][T19285] hsr_slave_0: entered promiscuous mode [ 1055.546112][T19285] hsr_slave_1: entered promiscuous mode [ 1055.589895][T19285] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1055.597498][T19285] Cannot create hsr debugfs directory [ 1055.635499][T19381] chnl_net:caif_netlink_parms(): no params data found [ 1056.097626][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.417710][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.559908][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.605672][T19459] can0: slcan on ptm0. [ 1056.792586][T19381] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.828823][T19381] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.850289][T13467] Bluetooth: hci2: command tx timeout [ 1056.864920][T19381] bridge_slave_0: entered allmulticast mode [ 1056.897101][T19381] bridge_slave_0: entered promiscuous mode [ 1057.011896][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.066899][T19381] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.078947][T19381] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.090839][T19381] bridge_slave_1: entered allmulticast mode [ 1057.098524][T19381] bridge_slave_1: entered promiscuous mode [ 1057.268456][T19381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1057.339782][T19456] can0 (unregistered): slcan off ptm0. [ 1057.432168][T19381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1057.862526][T19381] team0: Port device team_slave_0 added [ 1058.005014][T19477] netlink: 'syz.3.3923': attribute type 10 has an invalid length. [ 1058.077889][T19381] team0: Port device team_slave_1 added [ 1058.358340][T19381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1058.375694][T19381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1058.454235][T19381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1058.495678][ T12] bridge_slave_1: left allmulticast mode [ 1058.519696][ T12] bridge_slave_1: left promiscuous mode [ 1058.769846][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.843531][ T12] bridge_slave_0: left allmulticast mode [ 1058.849216][ T12] bridge_slave_0: left promiscuous mode [ 1058.876247][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.929771][T13467] Bluetooth: hci2: command tx timeout [ 1061.931712][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1061.982845][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1062.042243][ T12] bond0 (unregistering): Released all slaves [ 1062.406307][T19381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1062.418714][T19381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1062.454922][T19381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1062.858908][T19381] hsr_slave_0: entered promiscuous mode [ 1062.869057][T19381] hsr_slave_1: entered promiscuous mode [ 1062.879562][T19381] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1062.887469][T19381] Cannot create hsr debugfs directory [ 1063.236632][ T12] hsr_slave_0: left promiscuous mode [ 1063.262843][ T12] hsr_slave_1: left promiscuous mode [ 1063.275372][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1063.290273][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1063.326014][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1063.344952][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1063.401741][ T12] veth0_macvtap: left promiscuous mode [ 1063.418938][ T12] veth1_vlan: left promiscuous mode [ 1063.434693][ T12] veth0_vlan: left promiscuous mode [ 1065.348683][T19544] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1065.797462][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1065.927421][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1067.768868][T19550] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3938'. [ 1067.889860][T19285] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1067.929533][T19285] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1068.034143][T19285] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1068.078845][T19285] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1068.895808][T19285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1068.965318][ T29] audit: type=1326 audit(1720180442.171:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19588 comm="syz.1.3946" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1031b75bd9 code=0x0 [ 1068.969313][T19285] 8021q: adding VLAN 0 to HW filter on device team0 [ 1069.826697][T16173] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.833899][T16173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1070.177043][T16173] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.184293][T16173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1070.466475][T19381] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1070.597249][T19381] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1070.716483][T19381] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1070.790830][T19381] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1071.091414][T19381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1071.136075][T19381] 8021q: adding VLAN 0 to HW filter on device team0 [ 1071.211508][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.218671][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1071.253438][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.260639][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1071.402440][T19285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1071.900651][T19381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1072.231527][T19381] veth0_vlan: entered promiscuous mode [ 1072.321312][T19381] veth1_vlan: entered promiscuous mode [ 1072.412785][T19651] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1072.453444][T19285] veth0_vlan: entered promiscuous mode [ 1072.511828][T19285] veth1_vlan: entered promiscuous mode [ 1072.565890][T19381] veth0_macvtap: entered promiscuous mode [ 1072.578538][T19654] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1072.605287][T19381] veth1_macvtap: entered promiscuous mode [ 1072.724940][T19285] veth0_macvtap: entered promiscuous mode [ 1072.763946][T19381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1072.803688][T19381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1072.823998][T19381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1072.859809][T19381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1072.882712][T19381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1072.915263][T19381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1072.941023][T19381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1072.972460][T19285] veth1_macvtap: entered promiscuous mode [ 1073.006598][T19381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1073.060004][T19381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1073.084803][T19381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1073.125343][T19381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1073.182644][T19381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1073.204198][T19381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1073.216743][T19381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1073.246593][ T29] audit: type=1326 audit(1720180446.461:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19668 comm="syz.2.3955" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0bd2975bd9 code=0x0 [ 1073.466037][T19381] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.678594][T19381] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.849913][T19381] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.858646][T19381] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.014612][T19285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1074.046255][T19285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1074.084757][T19285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1074.118723][T19285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1074.229813][T19285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1074.260009][T19285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1074.300213][T19285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1074.347102][T19285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1074.387735][T19285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1074.792621][T19285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1074.949700][T19285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1074.999763][T19285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1075.049951][T19285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1075.107451][T19285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1075.124946][T19285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1075.135950][T19285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1075.147388][T19285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1075.165440][T19285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1075.193850][T19285] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.219817][T19285] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.230275][T19285] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.240741][T19285] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.318977][T19694] misc userio: No port type given on /dev/userio [ 1075.499873][ T5087] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1075.710830][ T5087] usb 2-1: Using ep0 maxpacket: 8 [ 1075.738778][ T5087] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1075.779764][ T5087] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1075.831267][ T5087] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1075.847436][ T5087] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1075.867277][ T5087] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1075.923509][ T5087] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1075.937211][ T5087] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.167516][ T5087] usb 2-1: usb_control_msg returned -32 [ 1076.192838][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1076.211251][ T5087] usbtmc 2-1:16.0: can't read capabilities [ 1076.228733][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1076.539976][ T9] usb 4-1: new low-speed USB device number 35 using dummy_hcd [ 1076.830022][ T9] usb 4-1: Invalid ep0 maxpacket: 16 [ 1076.966538][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1076.993560][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1077.053945][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1077.062206][ T9] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 1077.090771][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1077.126579][T15406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1077.143153][T15406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1077.249359][T19714] netlink: 'syz.0.3905': attribute type 10 has an invalid length. [ 1077.337663][T19714] veth1_macvtap: left promiscuous mode [ 1077.442601][ T9] usb 4-1: Invalid ep0 maxpacket: 16 [ 1077.742140][ T9] usb usb4-port1: attempt power cycle [ 1078.189847][ T29] audit: type=1326 audit(1720180451.401:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19719 comm="syz.2.3967" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0bd2975bd9 code=0x0 [ 1078.224659][ T9] usb 4-1: new low-speed USB device number 37 using dummy_hcd [ 1078.272467][ T5133] usb 2-1: USB disconnect, device number 36 [ 1078.280560][ T9] usb 4-1: Invalid ep0 maxpacket: 16 [ 1078.288165][ T5135] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1078.479867][ T9] usb 4-1: new low-speed USB device number 38 using dummy_hcd [ 1078.541984][ T9] usb 4-1: Invalid ep0 maxpacket: 16 [ 1078.558052][ T9] usb usb4-port1: unable to enumerate USB device [ 1079.369948][ T5135] usb 1-1: Using ep0 maxpacket: 16 [ 1079.377408][ T5135] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1079.393294][ T5135] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1079.402448][ T5135] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.426312][ T5135] usb 1-1: config 0 descriptor?? [ 1080.329222][T19745] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3976'. [ 1080.338809][T19745] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 1080.533233][T19714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1080.621507][T19714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1080.634867][ T29] audit: type=1326 audit(1720180453.831:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19751 comm="syz.2.3978" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0bd2975bd9 code=0x0 [ 1080.895601][ T5135] hid (null): invalid report_count 65331 [ 1080.980096][ T5135] hid-generic 0003:0158:0100.001C: unknown main item tag 0x1 [ 1081.015962][ T5135] hid-generic 0003:0158:0100.001C: unexpected long global item [ 1081.066202][ T5135] hid-generic 0003:0158:0100.001C: probe with driver hid-generic failed with error -22 [ 1081.127366][ T5135] usb 1-1: USB disconnect, device number 46 [ 1081.439721][ T785] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1081.630229][ T785] usb 2-1: Using ep0 maxpacket: 8 [ 1081.654196][ T785] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1081.670147][ T785] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1081.693227][ T785] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1081.720036][ T785] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1081.735190][ T785] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1081.759562][ T785] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1081.768832][ T785] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.323090][ T785] usb 2-1: usb_control_msg returned -32 [ 1082.330457][ T785] usbtmc 2-1:16.0: can't read capabilities [ 1083.543708][T15833] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.675222][T15833] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.719856][ T5087] usb 5-1: new low-speed USB device number 45 using dummy_hcd [ 1083.797834][T15833] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.940278][ T5087] usb 5-1: Invalid ep0 maxpacket: 16 [ 1083.997937][T15833] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.099752][ T5087] usb 5-1: new low-speed USB device number 46 using dummy_hcd [ 1084.119416][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1084.134101][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1084.146374][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1084.159526][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1084.184155][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1084.191893][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1084.366557][ T5087] usb 5-1: Invalid ep0 maxpacket: 16 [ 1084.406682][ T5087] usb usb5-port1: attempt power cycle [ 1084.482422][T15833] bridge_slave_1: left allmulticast mode [ 1084.507279][T15833] bridge_slave_1: left promiscuous mode [ 1084.524603][T15833] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.544197][T15833] bridge_slave_0: left allmulticast mode [ 1084.555661][T15833] bridge_slave_0: left promiscuous mode [ 1084.566180][T15833] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.870234][ T5087] usb 5-1: new low-speed USB device number 47 using dummy_hcd [ 1084.951331][ T5087] usb 5-1: Invalid ep0 maxpacket: 16 [ 1085.143567][ T5087] usb 5-1: new low-speed USB device number 48 using dummy_hcd [ 1085.329330][ T5087] usb 5-1: device descriptor read/8, error -71 [ 1085.508643][ T5087] usb usb5-port1: unable to enumerate USB device [ 1085.764545][ T29] audit: type=1326 audit(1720180458.981:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19819 comm="syz.4.4001" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdef8f75bd9 code=0x0 [ 1085.785502][ C0] vkms_vblank_simulate: vblank timer overrun [ 1086.003919][T15406] Bluetooth: hci5: Frame reassembly failed (-90) [ 1086.309026][T17991] Bluetooth: hci2: command tx timeout [ 1087.497265][T15833] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1087.537152][T15833] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1087.551616][T15833] bond0 (unregistering): Released all slaves [ 1087.573154][T17991] Bluetooth: hci4: command 0x0406 tx timeout [ 1087.969711][T13467] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1088.370647][T13467] Bluetooth: hci2: command tx timeout [ 1088.533332][T19790] usbtmc 2-1:16.0: usb_control_msg returned -110 [ 1089.678649][ T5131] usb 2-1: USB disconnect, device number 37 [ 1089.801342][ T29] audit: type=1326 audit(1720180463.021:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19865 comm="syz.3.4011" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01b7575bd9 code=0x0 [ 1089.925218][ T45] usb 3-1: new low-speed USB device number 52 using dummy_hcd [ 1089.969073][T19803] chnl_net:caif_netlink_parms(): no params data found [ 1090.065106][T15833] hsr_slave_0: left promiscuous mode [ 1090.099984][T15833] hsr_slave_1: left promiscuous mode [ 1090.115066][T15833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1090.128712][T15833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1090.129976][ T45] usb 3-1: Invalid ep0 maxpacket: 16 [ 1090.142261][T15833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1090.157974][T15833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1090.227322][T15833] veth0_macvtap: left promiscuous mode [ 1090.249825][T15833] veth1_vlan: left promiscuous mode [ 1090.265784][T15833] veth0_vlan: left promiscuous mode [ 1090.468552][ T53] Bluetooth: hci2: command tx timeout [ 1090.489991][ T45] usb 3-1: new low-speed USB device number 53 using dummy_hcd [ 1090.729724][ T45] usb 3-1: Invalid ep0 maxpacket: 16 [ 1090.751914][ T45] usb usb3-port1: attempt power cycle [ 1090.907285][T13467] block nbd4: Receive control failed (result -32) [ 1090.920798][T19880] block nbd4: shutting down sockets [ 1091.196370][ T45] usb 3-1: new low-speed USB device number 54 using dummy_hcd [ 1091.251747][ T45] usb 3-1: Invalid ep0 maxpacket: 16 [ 1091.409724][ T45] usb 3-1: new low-speed USB device number 55 using dummy_hcd [ 1091.531866][ T45] usb 3-1: device descriptor read/8, error -71 [ 1091.659361][ T45] usb usb3-port1: unable to enumerate USB device [ 1092.546198][T13467] Bluetooth: hci2: command tx timeout [ 1092.815585][ T29] audit: type=1326 audit(1720180466.021:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19919 comm="syz.3.4023" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01b7575bd9 code=0x0 [ 1093.005187][T15833] team0 (unregistering): Port device team_slave_1 removed [ 1093.009766][ T45] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1093.055269][T15833] team0 (unregistering): Port device team_slave_0 removed [ 1093.203072][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 1093.226281][ T45] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1093.248880][ T45] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1093.266679][ T45] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1093.276573][ T45] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1093.289737][ T45] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1093.308046][ T45] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1093.319354][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.551275][ T45] usb 3-1: usb_control_msg returned -32 [ 1093.557344][ T45] usbtmc 3-1:16.0: can't read capabilities [ 1093.971087][T19938] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 1094.003544][ T45] usb 3-1: USB disconnect, device number 56 [ 1094.074089][T19935] block nbd3: shutting down sockets [ 1094.205399][T19803] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.229347][T19803] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.251317][T19803] bridge_slave_0: entered allmulticast mode [ 1094.280187][T19803] bridge_slave_0: entered promiscuous mode [ 1094.298905][T19803] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.318755][T19803] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.341571][T19803] bridge_slave_1: entered allmulticast mode [ 1094.348914][T19803] bridge_slave_1: entered promiscuous mode [ 1094.500481][T19803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1094.532519][T19803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1094.739191][T19803] team0: Port device team_slave_0 added [ 1094.767138][T19803] team0: Port device team_slave_1 added [ 1094.951690][T19803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1095.009767][T19803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1095.367626][T19803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1095.449852][ T58] usb 4-1: new low-speed USB device number 39 using dummy_hcd [ 1095.710255][T19803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1095.737059][ T58] usb 4-1: Invalid ep0 maxpacket: 16 [ 1095.760042][T19803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1095.787562][T19803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1095.929725][ T58] usb 4-1: new low-speed USB device number 40 using dummy_hcd [ 1095.954899][T19803] hsr_slave_0: entered promiscuous mode [ 1096.036091][T19803] hsr_slave_1: entered promiscuous mode [ 1096.045491][T19803] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1096.073314][ T29] audit: type=1326 audit(1720180469.291:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19977 comm="syz.2.4034" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0bd2975bd9 code=0x0 [ 1096.096232][T19803] Cannot create hsr debugfs directory [ 1096.139775][ T58] usb 4-1: Invalid ep0 maxpacket: 16 [ 1096.156041][ T58] usb usb4-port1: attempt power cycle [ 1096.629856][ T58] usb 4-1: new low-speed USB device number 41 using dummy_hcd [ 1096.680448][ T58] usb 4-1: Invalid ep0 maxpacket: 16 [ 1097.765629][ T58] usb 4-1: new low-speed USB device number 42 using dummy_hcd [ 1097.899708][ T58] usb 4-1: device descriptor read/8, error -71 [ 1098.050205][ T58] usb usb4-port1: unable to enumerate USB device [ 1098.126071][T19803] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1098.215389][T19803] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1098.256521][T19803] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1098.308654][T19803] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1098.604089][T19803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1098.649731][ T58] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1098.686059][T19803] 8021q: adding VLAN 0 to HW filter on device team0 [ 1098.779938][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 1098.787103][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1098.835011][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 1098.842244][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1099.043386][T20012] block nbd2: shutting down sockets [ 1099.721037][ T58] usb 4-1: Using ep0 maxpacket: 8 [ 1099.728310][ T58] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1099.736978][ T58] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1099.749135][ T58] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1099.770380][ T58] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1099.796484][ T58] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1099.840383][ T58] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1099.849470][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.130536][ T58] usb 4-1: usb_control_msg returned -32 [ 1100.150172][ T58] usbtmc 4-1:16.0: can't read capabilities [ 1100.193833][T19803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1100.418992][T19803] veth0_vlan: entered promiscuous mode [ 1100.456362][ T29] audit: type=1326 audit(1720180473.671:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20049 comm="syz.2.4044" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0bd2975bd9 code=0x0 [ 1100.556800][T19803] veth1_vlan: entered promiscuous mode [ 1100.594649][T19803] veth0_macvtap: entered promiscuous mode [ 1100.605556][T19803] veth1_macvtap: entered promiscuous mode [ 1100.692168][T19803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1100.754696][T19803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.775928][T19803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1100.809212][T19803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.839238][T19803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1100.887122][T19803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.926544][T19803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1100.944222][T19803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.965830][T19803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1100.991883][T19803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1101.038305][T19803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1101.292180][T19803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1101.482054][T19803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1101.591898][T19803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1101.643201][ T9] usb 4-1: USB disconnect, device number 43 [ 1101.664295][T19803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1101.696934][T19803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1101.708133][T19803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1101.731178][T19803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1101.906171][T19803] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.949651][T19803] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.980855][T19803] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1102.011944][T19803] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1102.881328][T15833] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1102.972129][T15833] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1103.024187][ T2417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1103.076283][ T2417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1103.753098][ T29] audit: type=1326 audit(1720180476.961:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20105 comm="syz.0.4055" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9924f75bd9 code=0x0 [ 1104.365270][T13467] block nbd2: Receive control failed (result -32) [ 1104.391709][T20094] block nbd2: shutting down sockets [ 1107.534980][T20166] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1107.881042][ T29] audit: type=1326 audit(1720180481.101:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20167 comm="syz.1.4067" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1031b75bd9 code=0x0 [ 1110.066140][ T11] Bluetooth: hci5: Frame reassembly failed (-90) [ 1110.074002][ T11] Bluetooth: hci5: Frame reassembly failed (-84) [ 1111.090375][T20225] input: syz1 as /devices/virtual/input/input31 [ 1111.557131][ T29] audit: type=1326 audit(1720180484.771:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20226 comm="syz.2.4080" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0bd2975bd9 code=0x0 [ 1112.248500][T13467] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1112.250613][ T53] Bluetooth: hci5: command 0xfc11 tx timeout [ 1112.293190][T20234] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1113.509770][T13467] Bluetooth: hci0: unexpected event 0x3e length: 360 > 260 [ 1113.509840][T13467] Bluetooth: hci0: unexpected subevent 0x0d length: 359 > 260 [ 1113.524759][T13467] Bluetooth: hci0: Unknown advertising packet type: 0x1f [ 1113.524847][T13467] Bluetooth: hci0: adv larger than maximum supported [ 1114.389846][ T785] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1114.602026][ T785] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1114.642421][ T785] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1114.673567][ T785] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1114.703000][ T785] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1114.736759][ T29] audit: type=1326 audit(1720180487.941:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20264 comm="syz.3.4092" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01b7575bd9 code=0x0 [ 1114.784931][ T785] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1114.796012][ T785] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1114.829848][ T785] usb 3-1: Manufacturer: syz [ 1114.836850][ T785] usb 3-1: config 0 descriptor?? [ 1115.391249][T20271] input: syz1 as /devices/virtual/input/input32 [ 1116.153433][ T785] appleir 0003:05AC:8243.001D: No inputs registered, leaving [ 1116.216649][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.223144][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.272546][ T785] appleir 0003:05AC:8243.001D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 1116.379458][ T785] usb 3-1: USB disconnect, device number 57 [ 1116.844896][ T12] Bluetooth: hci5: Frame reassembly failed (-90) [ 1117.460720][T20286] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1118.861124][T17991] Bluetooth: hci5: command 0xfc11 tx timeout [ 1118.869198][T13467] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1119.303239][ T29] audit: type=1326 audit(1720180492.521:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20304 comm="syz.2.4103" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0bd2975bd9 code=0x0 [ 1119.759184][T20321] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1120.629503][T20328] input: syz1 as /devices/virtual/input/input33 [ 1122.955855][T20338] bio_check_eod: 2 callbacks suppressed [ 1122.955875][T20338] syz.2.4113: attempt to access beyond end of device [ 1122.955875][T20338] loop2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1122.974972][T20338] syz.2.4113: attempt to access beyond end of device [ 1122.974972][T20338] loop2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1122.988037][T20338] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1122.998003][T20338] syz.2.4113: attempt to access beyond end of device [ 1122.998003][T20338] loop2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1123.011090][T20338] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 1123.020725][T20338] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1123.028384][T20338] UDF-fs: Scanning with blocksize 512 failed [ 1123.035407][T20338] syz.2.4113: attempt to access beyond end of device [ 1123.035407][T20338] loop2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1123.049007][T20338] syz.2.4113: attempt to access beyond end of device [ 1123.049007][T20338] loop2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1123.063604][T20338] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1123.073561][T20338] syz.2.4113: attempt to access beyond end of device [ 1123.073561][T20338] loop2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1123.086714][T20338] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 1123.096791][T20338] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1123.104505][T20338] UDF-fs: Scanning with blocksize 1024 failed [ 1123.111322][T20338] syz.2.4113: attempt to access beyond end of device [ 1123.111322][T20338] loop2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1123.124493][T20338] syz.2.4113: attempt to access beyond end of device [ 1123.124493][T20338] loop2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1123.137634][T20338] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1123.147440][T20338] syz.2.4113: attempt to access beyond end of device [ 1123.147440][T20338] loop2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1123.161606][T20338] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 1123.171288][T20338] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1123.178944][T20338] UDF-fs: Scanning with blocksize 2048 failed [ 1123.185617][T20338] syz.2.4113: attempt to access beyond end of device [ 1123.185617][T20338] loop2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1123.198767][T20338] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1123.208586][T20338] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 1123.218243][T20338] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1123.226066][T20338] UDF-fs: Scanning with blocksize 4096 failed [ 1123.232505][T20338] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 1124.682176][ T2817] Bluetooth: hci5: Frame reassembly failed (-90) [ 1125.234359][T20362] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1126.733597][T13467] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1127.615125][T20392] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1127.724620][T20395] input: syz1 as /devices/virtual/input/input34 [ 1129.433848][T20401] netlink: 'syz.2.4134': attribute type 27 has an invalid length. [ 1130.894309][ T35] Bluetooth: hci0: Frame reassembly failed (-90) [ 1131.227326][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1131.246449][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1131.265553][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1131.289824][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1131.298664][ T53] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1131.306720][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1131.352866][ T29] audit: type=1326 audit(1720180504.561:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20421 comm="syz.1.4141" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1031b75bd9 code=0x0 [ 1131.420728][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.546932][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.760457][T20431] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1131.839248][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.163031][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.229150][T20424] chnl_net:caif_netlink_parms(): no params data found [ 1132.470330][T20424] bridge0: port 1(bridge_slave_0) entered blocking state [ 1132.493064][T20424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.522824][T20424] bridge_slave_0: entered allmulticast mode [ 1132.544769][T20424] bridge_slave_0: entered promiscuous mode [ 1132.656610][T20424] bridge0: port 2(bridge_slave_1) entered blocking state [ 1132.663836][T20424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1132.671260][T20424] bridge_slave_1: entered allmulticast mode [ 1132.678161][T20424] bridge_slave_1: entered promiscuous mode [ 1133.095504][ T53] Bluetooth: hci0: command 0xfc11 tx timeout [ 1133.170314][T17991] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 1133.428583][T17991] Bluetooth: hci5: command tx timeout [ 1133.752423][T20457] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4149'. [ 1134.508897][T20424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1134.587920][T20424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1134.745046][ T51] bridge_slave_1: left allmulticast mode [ 1134.760661][ T51] bridge_slave_1: left promiscuous mode [ 1134.797041][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 1134.854192][ T51] bridge_slave_0: left allmulticast mode [ 1134.867373][ T51] bridge_slave_0: left promiscuous mode [ 1134.886558][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 1134.958904][T20466] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1135.509743][T17991] Bluetooth: hci5: command tx timeout [ 1135.743132][T20476] input: syz1 as /devices/virtual/input/input35 [ 1136.715593][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1136.790156][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1136.830606][ T51] bond0 (unregistering): Released all slaves [ 1137.203304][T20424] team0: Port device team_slave_0 added [ 1137.639885][T17991] Bluetooth: hci5: command tx timeout [ 1138.099755][T20424] team0: Port device team_slave_1 added [ 1138.570522][T20508] netlink: 'syz.3.4161': attribute type 27 has an invalid length. [ 1139.660355][T17991] Bluetooth: hci5: command tx timeout [ 1140.219824][T20424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1140.226819][T20424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1140.253038][ C0] vkms_vblank_simulate: vblank timer overrun [ 1140.389799][T20424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1140.435576][T20424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1140.467670][T20424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1140.493582][ C0] vkms_vblank_simulate: vblank timer overrun [ 1140.549721][T20424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1140.594203][ T51] hsr_slave_0: left promiscuous mode [ 1140.637609][ T51] hsr_slave_1: left promiscuous mode [ 1140.648537][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1140.670700][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1140.684455][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1140.704232][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1140.747098][ T51] veth1_macvtap: left promiscuous mode [ 1140.753108][ T51] veth0_macvtap: left promiscuous mode [ 1140.769929][ T51] veth1_vlan: left promiscuous mode [ 1140.782189][ T51] veth0_vlan: left promiscuous mode [ 1142.092556][ T51] team0 (unregistering): Port device team_slave_1 removed [ 1142.680012][ T51] team0 (unregistering): Port device team_slave_0 removed [ 1144.092315][T17991] Bluetooth: hci3: unexpected event 0x3e length: 360 > 260 [ 1144.092362][T17991] Bluetooth: hci3: unexpected subevent 0x0d length: 359 > 260 [ 1144.107402][T17991] Bluetooth: hci3: Unknown advertising packet type: 0x1f [ 1144.107434][T17991] Bluetooth: hci3: adv larger than maximum supported [ 1145.614414][T20424] hsr_slave_0: entered promiscuous mode [ 1145.654448][T20424] hsr_slave_1: entered promiscuous mode [ 1145.678683][T20424] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1145.692356][T20424] Cannot create hsr debugfs directory [ 1146.701328][T17991] Bluetooth: hci2: unexpected event 0x3e length: 360 > 260 [ 1146.701364][T17991] Bluetooth: hci2: unexpected subevent 0x0d length: 359 > 260 [ 1146.717379][T17991] Bluetooth: hci2: Unknown advertising packet type: 0x1f [ 1146.717462][T17991] Bluetooth: hci2: adv larger than maximum supported [ 1148.235441][T20424] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1148.286335][T20424] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1148.322329][T20424] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1148.456825][T20424] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1149.367884][T20424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1149.440359][T20424] 8021q: adding VLAN 0 to HW filter on device team0 [ 1149.453503][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1149.460715][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1149.511248][T20673] nvme_fabrics: unknown parameter or missing value 'Y' in ctrl creation request [ 1149.843463][T16173] bridge0: port 2(bridge_slave_1) entered blocking state [ 1149.850665][T16173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1150.125157][T20686] binder_alloc: 20684: binder_alloc_buf, no vma [ 1150.235003][T20669] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1150.260230][T20669] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1150.825620][T20669] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1150.839117][T20702] netlink: 'syz.0.4219': attribute type 10 has an invalid length. [ 1150.857238][T20702] 8021q: adding VLAN 0 to HW filter on device team0 [ 1150.866197][T20702] bond0: (slave team0): Enslaving as an active interface with an up link [ 1150.914314][T20669] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1151.181359][T20669] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1151.191608][T20669] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1151.293383][T20424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1151.467233][T20669] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1151.483212][T20669] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1151.656681][T20669] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1151.689573][T20669] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1152.127716][T20424] veth0_vlan: entered promiscuous mode [ 1152.173005][T20424] veth1_vlan: entered promiscuous mode [ 1152.267714][T20424] veth0_macvtap: entered promiscuous mode [ 1152.356486][T20424] veth1_macvtap: entered promiscuous mode [ 1152.470196][T20424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1152.527954][T20424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1152.584244][T20424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1152.630881][T20424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1152.669683][T20424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1152.690147][T20424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1152.729364][T20424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1152.796601][T20424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1152.841503][T20424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1152.869297][T20424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1152.909755][T20424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1153.065225][T20424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1153.241131][T20760] binder: BINDER_SET_CONTEXT_MGR already set [ 1153.247157][T20760] binder: 20754:20760 ioctl 4018620d 20000000 returned -16 [ 1153.279762][T20424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1153.310588][T20424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1153.333123][T20424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1153.401645][T20769] nvme_fabrics: unknown parameter or missing value 'Y' in ctrl creation request [ 1153.424780][T20424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1153.449060][T20424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1153.535809][T20424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1153.703539][T20424] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.744379][T20424] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.862300][T20424] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.899980][T20424] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.512045][ T2417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1154.717864][ T2417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1154.816915][ T2417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1154.850344][ T2417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1155.947921][T20827] binder_alloc: 20826: binder_alloc_buf, no vma [ 1157.467182][T20857] nvme_fabrics: unknown parameter or missing value 'Y' in ctrl creation request [ 1162.744300][T20932] nvme_fabrics: unknown parameter or missing value 'Y' in ctrl creation request [ 1183.249310][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 1183.259697][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 1245.848522][T13467] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1245.880045][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 1245.886368][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 1246.152744][T13467] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1246.267825][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1246.288090][ T4478] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1246.359863][ T4478] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1246.561748][ T4478] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1246.719780][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1279.665878][T13467] Bluetooth: hci2: Opcode 0x1009 failed: -110 [ 1279.672824][ T4478] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1279.679684][T17991] Bluetooth: hci0: Opcode 0x0c14 failed: -110 [ 1327.011632][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 1327.018044][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 1391.139986][ T4478] Bluetooth: hci0: command tx timeout [ 1391.149215][ T4478] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1391.219750][ T30] INFO: task kworker/1:1:45 blocked for more than 145 seconds. [ 1391.227341][ T30] Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 1391.249635][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1391.258341][ T30] task:kworker/1:1 state:D stack:19280 pid:45 tgid:45 ppid:2 flags:0x00004000 [ 1391.289646][ T30] Workqueue: events_power_efficient reg_check_chans_work [ 1391.296952][ T30] Call Trace: [ 1391.309661][ T30] [ 1391.312635][ T30] __schedule+0x1796/0x49d0 [ 1391.317175][ T30] ? __pfx___schedule+0x10/0x10 [ 1391.329640][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1391.335655][ T30] ? __pfx_lock_release+0x10/0x10 [ 1391.359663][ T30] ? kick_pool+0x45c/0x620 [ 1391.364130][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1391.369344][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1391.414831][T21027] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1391.421196][T21037] Bluetooth: hci6: Opcode 0x0c03 failed: -4 [ 1391.429743][ T30] ? schedule+0x90/0x320 [ 1391.434014][ T30] schedule+0x14b/0x320 [ 1391.438185][ T30] schedule_preempt_disabled+0x13/0x30 [ 1391.448496][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 1391.454882][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 1391.478103][ T30] __mutex_lock+0x6a4/0xd70 [ 1391.489882][ T30] ? __mutex_lock+0x527/0xd70 [ 1391.494773][ T30] ? reg_check_chans_work+0x91/0xea0 [ 1391.510464][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1391.515551][ T30] reg_check_chans_work+0x91/0xea0 [ 1391.539702][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 1391.544784][ T30] ? __pfx_reg_check_chans_work+0x10/0x10 [ 1391.559693][ T30] ? process_scheduled_works+0x945/0x1830 [ 1391.565457][ T30] process_scheduled_works+0xa2c/0x1830 [ 1391.579682][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1391.585703][ T30] ? assign_work+0x364/0x3d0 [ 1391.595041][ T30] worker_thread+0x86d/0xd50 [ 1391.599752][ T30] ? __kthread_parkme+0x169/0x1d0 [ 1391.604790][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1391.610116][ T30] kthread+0x2f0/0x390 [ 1391.614198][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1391.619314][ T30] ? __pfx_kthread+0x10/0x10 [ 1391.623971][ T30] ret_from_fork+0x4b/0x80 [ 1391.628405][ T30] ? __pfx_kthread+0x10/0x10 [ 1391.633093][ T30] ret_from_fork_asm+0x1a/0x30 [ 1391.637893][ T30] [ 1391.669499][ T30] INFO: task kworker/1:2:785 blocked for more than 145 seconds. [ 1391.680996][ T30] Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 1391.688669][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1391.697411][ T30] task:kworker/1:2 state:D stack:20112 pid:785 tgid:785 ppid:2 flags:0x00004000 [ 1391.707690][ T30] Workqueue: events switchdev_deferred_process_work [ 1391.714462][ T30] Call Trace: [ 1391.717757][ T30] [ 1391.720774][ T30] __schedule+0x1796/0x49d0 [ 1391.725338][ T30] ? __pfx___schedule+0x10/0x10 [ 1391.730483][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1391.736485][ T30] ? __pfx_lock_release+0x10/0x10 [ 1391.741669][ T30] ? kick_pool+0x45c/0x620 [ 1391.746123][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1391.751426][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1391.757240][ T30] ? schedule+0x90/0x320 [ 1391.761829][ T30] schedule+0x14b/0x320 [ 1391.766003][ T30] schedule_preempt_disabled+0x13/0x30 [ 1391.771601][ T30] __mutex_lock+0x6a4/0xd70 [ 1391.776141][ T30] ? __mutex_lock+0x527/0xd70 [ 1391.780926][ T30] ? switchdev_deferred_process_work+0xe/0x20 [ 1391.787008][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1391.792134][ T30] ? process_scheduled_works+0x945/0x1830 [ 1391.797862][ T30] switchdev_deferred_process_work+0xe/0x20 [ 1391.803819][ T30] process_scheduled_works+0xa2c/0x1830 [ 1391.809404][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1391.815438][ T30] ? assign_work+0x364/0x3d0 [ 1391.820125][ T30] worker_thread+0x86d/0xd50 [ 1391.824756][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1391.830889][ T30] ? __kthread_parkme+0x169/0x1d0 [ 1391.835958][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1391.841215][ T30] kthread+0x2f0/0x390 [ 1391.845318][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1391.850514][ T30] ? __pfx_kthread+0x10/0x10 [ 1391.855724][ T30] ret_from_fork+0x4b/0x80 [ 1391.860238][ T30] ? __pfx_kthread+0x10/0x10 [ 1391.864872][ T30] ret_from_fork_asm+0x1a/0x30 [ 1391.877392][ T30] [ 1391.880604][ T30] INFO: task kworker/u8:4:15406 blocked for more than 146 seconds. [ 1391.888500][ T30] Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 1391.896705][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1391.905466][ T30] task:kworker/u8:4 state:D stack:21040 pid:15406 tgid:15406 ppid:2 flags:0x00004000 [ 1391.915712][ T30] Workqueue: ipv6_addrconf addrconf_verify_work [ 1391.922019][ T30] Call Trace: [ 1391.925304][ T30] [ 1391.928246][ T30] __schedule+0x1796/0x49d0 [ 1391.932819][ T30] ? __pfx___schedule+0x10/0x10 [ 1391.937772][ T30] ? __pfx_lock_release+0x10/0x10 [ 1391.942880][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1391.948375][ T30] ? kthread_data+0x52/0xd0 [ 1391.953016][ T30] ? schedule+0x90/0x320 [ 1391.957278][ T30] ? wq_worker_sleeping+0x66/0x240 [ 1391.962797][ T30] ? schedule+0x90/0x320 [ 1391.967076][ T30] schedule+0x14b/0x320 [ 1391.971701][ T30] schedule_preempt_disabled+0x13/0x30 [ 1391.977183][ T30] __mutex_lock+0x6a4/0xd70 [ 1391.981784][ T30] ? __mutex_lock+0x527/0xd70 [ 1391.986494][ T30] ? addrconf_verify_work+0x19/0x30 [ 1391.991825][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1391.996867][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1392.002936][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1392.009293][ T30] ? process_scheduled_works+0x945/0x1830 [ 1392.015234][ T30] addrconf_verify_work+0x19/0x30 [ 1392.020333][ T30] process_scheduled_works+0xa2c/0x1830 [ 1392.025917][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1392.032035][ T30] ? assign_work+0x364/0x3d0 [ 1392.036642][ T30] worker_thread+0x86d/0xd50 [ 1392.041333][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1392.047245][ T30] ? __kthread_parkme+0x169/0x1d0 [ 1392.052330][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1392.057454][ T30] kthread+0x2f0/0x390 [ 1392.061919][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1392.067046][ T30] ? __pfx_kthread+0x10/0x10 [ 1392.072000][ T30] ret_from_fork+0x4b/0x80 [ 1392.076435][ T30] ? __pfx_kthread+0x10/0x10 [ 1392.081106][ T30] ret_from_fork_asm+0x1a/0x30 [ 1392.085951][ T30] [ 1392.088997][ T30] INFO: task syz-executor:19803 blocked for more than 199 seconds. [ 1392.096932][ T30] Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 1392.104630][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1392.113334][ T30] task:syz-executor state:D stack:18864 pid:19803 tgid:19803 ppid:1 flags:0x00004006 [ 1392.123562][ T30] Call Trace: [ 1392.126860][ T30] [ 1392.130134][ T30] __schedule+0x1796/0x49d0 [ 1392.134674][ T30] ? __pfx___schedule+0x10/0x10 [ 1392.139721][ T30] ? __pfx_lock_release+0x10/0x10 [ 1392.144761][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1392.150305][ T30] ? schedule+0x90/0x320 [ 1392.154553][ T30] schedule+0x14b/0x320 [ 1392.158729][ T30] schedule_preempt_disabled+0x13/0x30 [ 1392.164566][ T30] __mutex_lock+0x6a4/0xd70 [ 1392.169092][ T30] ? __mutex_lock+0x527/0xd70 [ 1392.174193][ T30] ? tun_chr_close+0x3e/0x1b0 [ 1392.178888][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1392.217826][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1392.237540][ T30] tun_chr_close+0x3e/0x1b0 [ 1392.269679][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 1392.274843][ T30] __fput+0x24a/0x8a0 [ 1392.278852][ T30] task_work_run+0x24f/0x310 [ 1392.319691][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1392.324866][ T30] ? switch_task_namespaces+0xe1/0x110 [ 1392.359677][ T30] do_exit+0xa27/0x27e0 [ 1392.363898][ T30] ? __pfx_do_exit+0x10/0x10 [ 1392.369090][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1392.439687][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1392.445725][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1392.489669][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1392.494851][ T30] do_group_exit+0x207/0x2c0 [ 1392.499470][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1392.539702][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1392.544969][ T30] get_signal+0x16a1/0x1740 [ 1392.549503][ T30] ? __pfx_get_signal+0x10/0x10 [ 1392.619698][ T30] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 1392.625313][ T30] arch_do_signal_or_restart+0x96/0x860 [ 1392.659687][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1392.665893][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1392.699058][ T30] ? syscall_exit_to_user_mode+0xa3/0x360 [ 1392.707759][ T30] syscall_exit_to_user_mode+0xc9/0x360 [ 1392.713388][ T30] do_syscall_64+0x100/0x230 [ 1392.717991][ T30] ? clear_bhb_loop+0x35/0x90 [ 1392.722757][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1392.728663][ T30] RIP: 0033:0x7f9924fa7bc5 [ 1392.733953][ T30] RSP: 002b:00007ffe2b2f8b20 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 1392.759160][T21033] Bluetooth: hci2: Opcode 0x0c03 failed: -4 [ 1392.769876][ T30] RAX: 0000000000000000 RBX: 000000000000008c RCX: 00007f9924fa7bc5 [ 1392.778551][ T30] RDX: 00007ffe2b2f8b60 RSI: 0000000000000000 RDI: 0000000000000000 [ 1392.859845][ T30] RBP: 00007ffe2b2f8bec R08: 0000000000000000 R09: 7fffffffffffffff [ 1392.867857][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000063 [ 1392.880369][T13467] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1392.889335][T13467] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1392.949655][ T30] R13: 000000000011d851 R14: 000000000011ccf6 R15: 0000000000000014 [ 1392.957698][ T30] [ 1392.999674][ T30] INFO: task syz.0.4276:20996 blocked for more than 200 seconds. [ 1393.007428][ T30] Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 1393.049679][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1393.058380][ T30] task:syz.0.4276 state:D stack:26560 pid:20996 tgid:20995 ppid:19803 flags:0x00000004 [ 1393.129672][ T30] Call Trace: [ 1393.132995][ T30] [ 1393.135934][ T30] __schedule+0x1796/0x49d0 [ 1393.169916][ T30] ? __pfx___schedule+0x10/0x10 [ 1393.174818][ T30] ? __pfx_lock_release+0x10/0x10 [ 1393.209687][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1393.215207][ T30] ? schedule+0x90/0x320 [ 1393.219461][ T30] schedule+0x14b/0x320 [ 1393.269692][ T30] schedule_preempt_disabled+0x13/0x30 [ 1393.275200][ T30] __mutex_lock+0x6a4/0xd70 [ 1393.307166][ T30] ? __mutex_lock+0x527/0xd70 [ 1393.330590][ T30] ? vlan_ioctl_handler+0x112/0x9d0 [ 1393.335840][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1393.349708][ T30] ? __might_fault+0xc6/0x120 [ 1393.354430][ T30] vlan_ioctl_handler+0x112/0x9d0 [ 1393.359466][ T30] ? sock_ioctl+0x664/0x8e0 [ 1393.379644][ T30] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 1393.385239][ T30] ? __asan_memset+0x23/0x50 [ 1393.395164][ T30] ? smack_file_ioctl+0x2a1/0x3a0 [ 1393.400299][ T30] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 1393.405858][ T30] sock_ioctl+0x683/0x8e0 [ 1393.410279][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 1393.415167][ T30] ? __fget_files+0x3f6/0x470 [ 1393.419916][ T30] ? __fget_files+0x29/0x470 [ 1393.424523][ T30] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1393.429468][ T30] ? security_file_ioctl+0x87/0xb0 [ 1393.434676][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 1393.439563][ T30] __se_sys_ioctl+0xfc/0x170 [ 1393.444271][ T30] do_syscall_64+0xf3/0x230 [ 1393.448824][ T30] ? clear_bhb_loop+0x35/0x90 [ 1393.453653][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1393.459617][ T30] RIP: 0033:0x7f9924f75bd9 [ 1393.464045][ T30] RSP: 002b:00007f9925d5e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1393.472570][ T30] RAX: ffffffffffffffda RBX: 00007f9925103f60 RCX: 00007f9924f75bd9 [ 1393.480639][ T30] RDX: 00000000200112c0 RSI: 0000000000008982 RDI: 0000000000000005 [ 1393.489070][ T30] RBP: 00007f9924fe4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 1393.497629][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1393.506084][ T30] R13: 000000000000000b R14: 00007f9925103f60 R15: 00007ffe2b2f8888 [ 1393.514190][ T30] [ 1393.517230][ T30] INFO: task syz.0.4276:20998 blocked for more than 201 seconds. [ 1393.525001][ T30] Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 1393.532683][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1393.541390][ T30] task:syz.0.4276 state:D stack:26816 pid:20998 tgid:20995 ppid:19803 flags:0x00000004 [ 1393.551657][ T30] Call Trace: [ 1393.554940][ T30] [ 1393.557883][ T30] __schedule+0x1796/0x49d0 [ 1393.562481][ T30] ? __pfx___schedule+0x10/0x10 [ 1393.567344][ T30] ? __pfx_lock_release+0x10/0x10 [ 1393.572427][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1393.577911][ T30] ? schedule+0x90/0x320 [ 1393.582237][ T30] schedule+0x14b/0x320 [ 1393.586404][ T30] schedule_preempt_disabled+0x13/0x30 [ 1393.591951][ T30] __mutex_lock+0x6a4/0xd70 [ 1393.597166][ T30] ? __mutex_lock+0x527/0xd70 [ 1393.601926][ T30] ? sock_ioctl+0x664/0x8e0 [ 1393.606449][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1393.611559][ T30] ? __asan_memset+0x23/0x50 [ 1393.616170][ T30] ? smack_file_ioctl+0x2a1/0x3a0 [ 1393.621266][ T30] sock_ioctl+0x664/0x8e0 [ 1393.625615][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 1393.630600][ T30] ? __fget_files+0x3f6/0x470 [ 1393.635302][ T30] ? __fget_files+0x29/0x470 [ 1393.639962][ T30] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1393.644920][ T30] ? security_file_ioctl+0x87/0xb0 [ 1393.650126][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 1393.654999][ T30] __se_sys_ioctl+0xfc/0x170 [ 1393.659679][ T30] do_syscall_64+0xf3/0x230 [ 1393.664207][ T30] ? clear_bhb_loop+0x35/0x90 [ 1393.668901][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1393.674865][ T30] RIP: 0033:0x7f9924f75bd9 [ 1393.679286][ T30] RSP: 002b:00007f9925d3d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1393.687808][ T30] RAX: ffffffffffffffda RBX: 00007f9925104038 RCX: 00007f9924f75bd9 [ 1393.695847][ T30] RDX: 0000000020000300 RSI: 0000000000008983 RDI: 000000000000000b [ 1393.704197][ T30] RBP: 00007f9924fe4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 1393.712543][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1393.720565][ T30] R13: 000000000000006e R14: 00007f9925104038 R15: 00007ffe2b2f8888 [ 1393.728573][ T30] [ 1393.731697][ T30] INFO: task syz.0.4276:21003 blocked for more than 201 seconds. [ 1393.739418][ T30] Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 1393.747188][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1393.759815][ T30] task:syz.0.4276 state:D stack:26712 pid:21003 tgid:20995 ppid:19803 flags:0x00004004